The following diagram shows the Active Directory hosting structure implemented by Microsoft Provisioning System within the Active Directory domain. To see more information about an item, click the plus (+) sign next to its name.
Contains all of the Active Directory objects associated with Microsoft Provisioning System, as described below.
Contains objects that allow Microsoft Provisioning System to do the following: expand Active Directory to greater than 5,000 objects, determine the role priority number (RPN) of the requesting user account, and determine the organization type (hosting, reseller, or customer) of an organizational unit.
User accounts in the hosting container. For example, user1@hosting, user2@hosting, and so forth.
Groups in the hosting organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by service provider administrators and customer service representatives (CSRs).
The security group for service provider administrators. To make a user account a service provider administrator, you make it a member of this group.
The security group for service provider CSRs. To make a user account a service provider CSR, you make it a member of this group.
Contains all of the Active Directory objects associated with a reseller organization, in this example, Reseller1. All reseller organizational units are created directly under the hosting organizational unit, as shown in this example.
Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the reseller organizational unit.
User accounts in the reseller organization. For example, user1@reseller_organization, user2@reseller_organization, and so forth.
Groups in the reseller organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.
admins@reseller_organization group
The security group for reseller administrators. To make a user account a reseller administrator, you make it a member of this group.
csradmins@reseller_organization group
The security group for reseller CSRs. To make a user account a reseller CSR, you make it a member of this group.
Contains all of the Active Directory objects associated with a customer organization, in this example, Customer1. All customer organizational units are created directly under a reseller organizational unit, as shown in this example.
Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the customer organizational unit.
User accounts in the customer organization. For example, user1@customer_organization, user2@customer_organization, and so forth.
Groups in the customer organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.
admins@customer_organization group
The security group for organization administrators. To make a user account an organization administrator, you make it a member of this group.
csradmins@customer_organization group
The security group for organization CSRs. To make a user account an organization CSR, you make it a member of this group.
Contains all of the Active Directory objects associated with a customer organization, in this example, Customer2. All customer organizational units are created directly under a reseller organizational unit, as shown in this example.
Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the customer organizational unit.
User accounts in the customer organization. For example, user1@customer_organization, user2@customer_organization, and so forth.
Groups in the customer organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.
admins@customer_organization group
The security group for organization administrators. To make a user account an organization administrator, you make it a member of this group.
csradmins@reseller_organization group
The security group for organization CSRs. To make a user account an organization CSR, you make it a member of this group.
Contains all of the Active Directory objects associated with a reseller organization, in this example, Reseller2. All reseller organizational units are created directly under the hosting organizational unit, as shown in this example.
Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the reseller organizational unit.
User accounts in the reseller organization. For example, user1@reseller_organization, user2@reseller_organization, and so forth.
Groups in the reseller organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.
admins@reseller_organization group
The security group for reseller administrators. To make a user account a reseller administrator, you make it a member of this group.
csradmins@reseller_organization group
The security group for reseller CSRs. To make a user account a reseller CSR, you make it a member of this group.
Contains all of the Active Directory objects associated with a customer organization, in this example, Customer3. All customer organizational units are created directly under a reseller organizational unit, as shown in this example.
Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the customer organizational unit.
User accounts in the customer organization. For example, user1@customer_organization, user2@customer_organization, and so forth.
Groups in the customer organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.
admins@customer_organization group
The security group for organization administrators. To make a user account an organization administrator, you make it a member of this group.
csradmins@reseller_organization group
The security group for organization CSRs. To make a user account an organization CSR, you make it a member of this group.
Contains all of the Active Directory objects associated with a customer organization, in this example, Customer4. All customer organizational units are created directly under a reseller organizational unit, as shown in this example.
Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the customer organizational unit.
User accounts in the customer organization. For example, user1@customer_organization, user2@customer_organization, and so forth.
Groups in the customer organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.
admins@customer_organization group
The security group for organization administrators. To make a user account an organization administrator, you make it a member of this group.
csradmins@reseller_organization group
The security group for organization CSRs. To make a user account an organization CSR, you make it a member of this group.